CVE-2021-1073

State: Published
Severity: 8.3 High
Published: Jun 25, 2021
Updated: Aug 3, 2024
Reserved: Nov 12, 2020

Description

NVIDIA GeForce Experience, all versions prior to 3.23, contains a vulnerability in the login flow when a user tries to log in by using a browser, while, at the same time, any other web page is loaded in other tabs of the same browser. In this situation, the web page can get access to the token of the user login session, leading to the possibility that the user’s account is compromised. This may lead to the targeted user’s data being accessed, altered, or lost.

Scores

CVSS	Score	Vector	Source
3.1	8.3 High	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H	nvidia

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
NVIDIA GeForce Experience SoftwareNVIDIA	All versions prior to 3.23Affected

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5199

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.